
Converts npm audit or Snyk reports into prioritized patch plans with actual timelines. You get P1 through P4 buckets (24 hours to next release), breaking change flags, and a dependency graph that orders upgrades so you don't break things patching a downstream package first. The risk scoring considers test coverage and how heavily you use each package, which is more useful than raw CVSS scores. The output is opinionated about what needs fixing now versus later, and it separates safe upgrades from ones that need migration work. Good for teams that run npm audit, see 47 vulnerabilities, and have no systematic way to decide what actually matters.
npx -y skills add patricio0312rev/skills --skill dependency-vulnerability-triage --agent claude-codeInstalls into .claude/skills of the current project.
Select a file.